EIP-2026-107797

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Imagevue r16 by injecting malicious JavaScript via the 'amount' parameter in the upload.php script. The payload triggers an alert dialog, proving arbitrary script execution in the context of the affected site.